CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115863 | HIGH | 7.6 | 0.3% | Oct 23, 2026 | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/cl... |
| CVE-2026-115813 | MEDIUM | 5.8 | 0.4% | Oct 23, 2026 | Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier migh... |
| CVE-2026-115812 | CRITICAL | 9.8 | 0.5% | Oct 23, 2026 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier mig... |
| CVE-2026-115567 | MEDIUM | 5.8 | 0.1% | Oct 23, 2026 | Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_t... |
| CVE-2026-110975 | HIGH | 7.4 | 0.2% | Oct 23, 2026 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d... |
| CVE-2026-87901 | HIGH | 8.3 | 0.3% | Oct 23, 2026 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. |
| CVE-2026-115810 | HIGH | 7.7 | 0.2% | Oct 23, 2026 | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut... |
| CVE-2026-106074 | MEDIUM | 4.8 | 0.3% | Oct 23, 2026 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an... |
| CVE-2026-106073 | LOW | 3.3 | 0.3% | Oct 23, 2026 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio... |
| CVE-2026-106072 | MEDIUM | 6.7 | 0.6% | Oct 23, 2026 | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when... |
| CVE-2026-106071 | LOW | 3.6 | 0.2% | Oct 23, 2026 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo... |
| CVE-2026-106070 | LOW | 3.7 | 0.4% | Oct 23, 2026 | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after th... |
| CVE-2026-106069 | HIGH | 7.4 | 0.3% | Oct 23, 2026 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addres... |
| CVE-2026-105483 | HIGH | 7.4 | 0.3% | Oct 23, 2026 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con... |
| CVE-2026-105482 | HIGH | 7.4 | 0.5% | Oct 23, 2026 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f... |
| CVE-2026-105481 | MEDIUM | 6.5 | 0.3% | Oct 23, 2026 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the ... |
| CVE-2026-57845 | HIGH | 8.8 | 0.5% | Oct 23, 2026 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute ... |
| CVE-2026-52356 | HIGH | 8.8 | 1.9% | Oct 23, 2026 | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows... |
| CVE-2026-50787 | HIGH | 7.5 | 0.3% | Oct 23, 2026 | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/c... |
| CVE-2025-45528 | HIGH | 7.3 | 0.2% | Oct 23, 2026 | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c... |
| CVE-2026-58497 | HIGH | 8.6 | — | Oct 23, 2026 | Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP... |
| CVE-2026-55486 | CRITICAL | 9.3 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0... |
| CVE-2026-55465 | MEDIUM | 5.3 | 0.3% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.0... |
| CVE-2026-55463 | MEDIUM | 6.5 | 0.1% | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11... |
| CVE-2026-55459 | HIGH | 7.4 | — | Oct 23, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0... |